CVE-2023-22470
Nextcloud Deck vulnerable to uncontrolled resource consumption
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 3.5EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
14 ene 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. A database error can be generated potentially causing a DoS when performed multiple times. There are currently no known workarounds. It is recommended that the Nextcloud Server is upgraded to 1.6.5 or 1.7.3 or 1.8.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Productos afectados
nextcloud · security-advisories¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →